{"schemaVersion":3,"id":"OPENSUSE-RU-2026:22132-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Recommended update for sequoia-sq\n\nThis update for sequoia-sq fixes the following issues:\n\nChanges in sequoia-sq:\n\n- Use crypto-openssl also for tests\n\nUpdate to version 1.5.0:\n\n  * tool: Release v1.5.0.\n  * tool: Fix link to README.\n  * tool: Set a version for the sqz dependency.\n  * Enable optimizations when building rust-crypto crates.\n  * Update NEWS.\n  * lib: Release v0.1.0.\n  * Update Cargo.lock.\n  * meta: Update link to documentation.\n  * lib: Update README.\n  * lib: Rename the high-level library to sqz.\n  * lib: Fix documentation.\n  * lib: Mention network_search in the lookup functions documentation.\n  * lib: Mention lookup and lookup_by in the certify documentation.\n  * lib: Mention lookup_by sign documentation.\n  * lib: Document that calls don't need to specify secret key material.\n  * lib: Fix docs.rs URL\n  * meta: Add rustfmt.toml that disables formatting\n  * lib: fix type infer error\n  * lib: Pass Paths through as is.\n  * lib: Preprocess the network when listing all bindings.\n  * lib: Upgrade sequoia-wot.\n  * lib: After running cert list, save the signature verification cache.\n  * lib: Parallelize cert list.\n  * lib: Pass the policy when getting the trust root or a shadow CA.\n  * implement dumping of pqc artifacts\n  * lib: Use an iterator instead of a slice.\n  * lib: Avoid monomorphization in signer.\n  * lib: Fix documentation.\n  * tool: Fix documentation.\n  * lib: Drop unnecessary imports in example.\n  * lib: Add required clap features.\n  * lib: Gate network support behind a feature.\n  * Don't conflate inline and cleartext signatures.\n  * lib: Document the signer module.\n  * lib: Add unit tests to the signer module.\n  * lib: Fix get_primary_keys's return type.\n  * lib: Convert get_signing_key, etc. to use the builder pattern.\n  * lib: Move decrypt_key to its own module.\n  * lib: Rename keys module to signer.\n  * lib: Refactor get_keys and associated functions.\n  * lib: Improve prompt's documentation.\n  * lib: Add a default prompt to Sequoia, don't require a prompt.\n  * lib: Loosen Sized constraint.\n  * lib: Make Prompt and PromptFactory Send and Sync.\n  * lib: Change SequoiaBuilder::builder to consume self.\n  * lib: Use explicit lifetimes with Context and Check.\n  * Use more precise lifetimes when referencing Sequoia and Sq.\n  * Replace generic lifetime names with more precise identifiers.\n  * tool: Fix password prompt.\n  * lib: Add PromptFactory.\n  * tool: Drop Sq::local_trust_root.\n  * lib: Change Ca to wrap a Cert instead of an Arc<LazyCert>.\n  * lib: Add functionality for looking up certificates by email address.\n  * lib: Add cert::CertProblem::ParseError.\n  * tool: Don't wrap Sequoia::lookup.\n  * lib: Improve lookup's documentation.\n  * lib: Rename lookup to lookup_all.\n  * lib: Don't write lints to stderr.\n  * lib: Change lookup to use its own error type.\n  * lib: Fix how Binding::cert looks up a certificate.\n  * lib: Add an option to lookup certificates by subkey.\n  * lib: Rename lookup's keyflags parameter to key_capabilities.\n  * lib: Drop lookup's unused or_by_primary parameter.\n  * lib: Fix key flags matching bug in Sequoia::lookup.\n  * tool: Improve displaying possibly revoked certificates.\n  * lib: Change lookup to take a single key handle.\n  * lib: Improve key generate's documentation.\n  * lib: Add unit tests for key generate.\n  * lib: Avoid monomorphization in key generate.\n  * lib: Rename Artifact to Outcome.\n  * lib: Use impl IntoIterator in setters.\n  * lib: Drop duplicated code.\n  * lib: Implement Clone for a few data structures.\n  * lib: Mark UserIDLint as non-exhaustive.\n  * lib: Implement Clone for UserIDLint.\n  * lib: Implement IntoIterator for network::search::Query.\n  * lib: Change network search to return an Outcome on success.\n  * lib: Change function to take an IntoIterator instead of a Vec.\n  * lib: Avoid monomorphization in the network search functionality.\n  * lib: Implement Clone for a few data structures.\n  * lib: Make Response and SourceInfo clonable.\n  * lib: Change cert list to always emit a Report.\n  * lib: Change cert list to return an Outcome on success.\n  * lib: Change cert list's getters to use iterators.\n  * lib: Implement Clone for additional structs and enums.\n  * lib: Change the decrypt functions to return an Outcome on success.\n  * lib: Avoid monomorphization in the decrypt functionality.\n  * lib: Change decrypt's getters to use iterators.\n  * lib: Implement Clone for additional structs and enums.\n  * lib: Change KeyStoreUnreachable to use a more precise error type.\n  * lib: Add some additional unit tests for the verify functionality.\n  * lib: Change the verify functions to return an Outcome on success.\n  * lib: Change verify to avoid monomorphization.\n  * lib: Improve key import's documentation.\n  * lib: Make a parse error an operational error.\n  * lib: Implement Clone for additional structs and enums.\n  * lib: Respect SEQUOIA_HOME by default.\n  * lib: Add import_cert to import a single certificate.\n  * lib: Improve cert list's documentation.\n  * lib: Make a parse error an operational error.\n  * lib: Fix import to emit errors.\n  * lib: Fix cert::import::Builder::import to return an Outcome.\n  * lib: Change cert import's getters and setters to use iterators.\n  * lib: Implement Clone for a few data structures.\n  * lib: Fix Sequoia::trust_roots's cache.\n  * lib: Improve certify's documentation.\n  * lib: Rework certify's error handling.\n  * lib: Add SystemError to pki::certify::{Error,Output}.\n  * lib: Adjust certify::Error::CertificationError.\n  * lib: Refactor how certify populates Outcome.\n  * lib: Use impl IntoIterator in setters.\n  * lib: Improve encrypt's documentation.\n  * lib: Add some unit tests for the encrypt functionality.\n  * lib: Align encrypt's signing error with sign's signing error.\n  * lib: Drop encrypt::output::EncryptionFailed.\n  * lib: Change encrypt to return an Outcome on success.\n  * lib: Rename Encrypted to Report.\n  * lib: Change the encrypt functionality to emit errors.\n  * lib: Change encrypt to use its own error type.\n  * lib: Implement Clone for prompt::Error.\n  * lib: Use impl IntoIterator in setters.\n  * lib: Avoid monomorphization in the encrypt functionality.\n  * lib: Improve sign's documentation.\n  * lib: Add some unit tests for the signing functionality.\n  * lib: Drop sign::output::SigningFailed.\n  * lib: Add missing `non_exhaustive`.\n  * lib: Change the sign functions to return an Outcome on success.\n  * lib: Fix comment.\n  * lib: Rename Signed to Report.\n  * lib: Change the sign functionality to emit errors.\n  * lib: Change sign to use its own error type.\n  * lib: Implement Clone for CertError, CertProblem and its variants.\n  * lib: Avoid monomorphization in the sign functionality.\n  * lib: Use impl IntoIterator in setters.\n  * lib: Mark struct as non-exhaustive.\n  * lib: Move types::Query et al. to cert::list.\n  * lib: Make cert_list's queries parameter optional.\n  * lib: Change list to take self, not &self.\n  * tool: When merging keyrings, preserve the order of the certificates.\n  * lib: Don't fail to generate a key if the shadow CAs are not usable.\n  * lib: Avoid an unnecessary box.\n  * lib: Drop the Sized bound in the impl of Prompt for &P.\n  * lib: Implement Clone for pki::certify's error types.\n  * lib: Change the cert import functions to return more information.\n  * lib: Consider a missing autocrypt header to be an import error.\n  * tool: Don't fail if the input to sq key import is empty.\n  * Update h2.\n  * lib: Improve cert::import::Output::ImportingFailed.\n  * lib: Tighten key import's error reporting.\n  * lib: Tighten cert import's error reporting.\n  * lib: Change the key import functions to return more information.\n  * lib: Change error type for a merged certificate.\n  * lib: Adjust the semantics of key import's return type.\n  * lib: Rework key::import::Builder::import_key.\n  * lib: Rework key import's error handling.\n  * lib: Move Error::StateDisabled to SystemError, drop Error.\n  * lib: Add a function to import Certs.\n  * lib: Add a separate error for emails with autocrypt headers.\n  * lib: Rename import_certs to import_keyring.\n  * lib: Improve cert import's documentation.\n  * lib: Change when cert import returns an error.\n  * lib: Rework cert import's error handling.\n  * lib: Move constructors for high-level methods to a single impl block.\n  * lib: Change verify to not require a stream.\n  * lib: Change sign to not require a stream.\n  * lib: Change pki certify to not require a stream.\n  * lib: Change network search to not require a stream.\n  * lib: Change encrypt to not require a stream.\n  * lib: Change decrypt to not require a stream.\n  * lib: Change cert import to not require a stream.\n  * lib: Make pki certify's output parameter optional.\n  * lib: Change pki::certify to return the certifications.\n  * lib: Change the encrypt method to take a Writer.\n  * lib: Change the sign methods to take a Writer.\n  * lib: Change the decrypt methods to take an OptionalWriter.\n  * lib: Change the verify methods to take an OptionalWriter.\n  * lib: Generalize and dry out the destination output handling.\n  * lib: Make network search's output parameter optional.\n  * Update spin.\n  * Update sequoia-openpgp.\n  * Update crossbeam-epoch.\n  * Forward allow-* crypto features.\n  * Relax rusqlite dependency.\n  * lib: Make key generate's output parameter more ergonomic.\n  * lib: Dry out the Stream trait declarations.\n  * tool: Add more cipher suites.\n  * tool: Use the right sig as the template for a new direct key sig\n  * tool: Add sq key generate --{encryption,signing}-algorithm.\n  * lib: Provide more control over the algorithms used in key generation.\n  * tool: Add type annotation.\n  * Update openssl.\n  * Update anyhow.\n  * lib: Add a method to Binding to return the certificate.\n  * lib: Add more conversion functions for FileStdinOrKeyHandle.\n  * lib: Make Sequoia::cert_store_ private.\n  * lib: Don't export Sequoia::hint or Sequoia::info.\n  * lib: Make the transitional module private.\n  * lib: Improve documentation for the lookup module.\n  * lib: Make the lookup module public.\n  * lib: Add some top-level documentation.\n  * lib: Add some unit tests for the verify functionality.\n  * lib: Change verify and decrypt to always emit a report.\n  * lib: Dry out code.\n  * lib: Tweak example.\n  * lib: Implement Clone for most of verify's structs and enums.\n  * lib: Improve documentation.\n  * lib: Finish convertng verify to emit structured output.\n  * lib: Change verify to also emit errors.\n  * lib: Add a forwarder to verify::Stream for &mut T.\n  * lib: Change verify to use its own error type.\n  * tool: Don't use transitional function from library.\n  * lib: Document network search.\n  * lib: Add some unit tests to network::search.\n  * lib: Always emit a report.\n  * lib: Propagate errors.\n  * lib: Check that the query is valid.\n  * lib: Separate network search's presentation from its implementation.\n  * lib: When configuring key servers, pass in the URI.\n  * lib: Add functions for getting more shadow CAs.\n  * lib: Implement Debug and Clone for Ca.\n  * lib: Inline serialize_keyring.\n  * lib: Inline import_or_emit.\n  * lib: Inline Response::progress_bar.\n  * lib: Inline Response::import_or_emit.\n  * lib: Inline Response::collect.\n  * lib: Change network::search to use its own Error type.\n  * lib: Make the Source data structure public.\n  * lib: Rename Method to Source.\n  * lib: Implement Debug for Query.\n  * lib: Add a source annotation to SystemError::CertStoreError.\n  * lib: Move the op macro to the errors module.\n  * lib: Change Sequoia::cert_store to return a SystemError.\n  * lib: Move search's parameters to the builder.\n  * lib: Change network search et al. to take `Query`s.\n  * lib: Make network::search::Query and a few methods public.\n  * lib: Dry out the network search code.\n  * lib: Change network search functions to be methods.\n  * lib: Make clap attribute feature gated\n  * lib: Export version number from library\n  * typo: cerItified\n  * Move the implementation of sq network search et al. to the library.\n  * Move http_client and related constants to the library.\n  * Move ResourceRecordType to the library.\n  * Move cert_exportable to the library.\n  * lib: Don't export the password_cache field.\n  * lib: Improve interface for setting session keys.\n  * lib: Improve interface for setting secret keys.\n  * lib: Improve interface for setting designated signers.\n  * lib: Improve and fix documentation for decrypt.\n  * lib: Add unit tests for decrypt.\n  * lib: Implement From<openpgp::crypto::SessionKey> for SessionKey.\n  * lib: Extract the correct error type from the decryption helper.\n  * lib: Rename MissingSessionKey to InvalidSessionKey.\n  * lib: Fix typo.\n  * lib: Change decrypt to use its own error type.\n  * lib: Change cert_list to also emit errors on the stream object.\n  * lib: Change cert_store_or_else to return SystemError\n  * lib: Implement Clone for SystemError.\n  * lib: Change cert::list::Builder::list to take &self.\n  * lib: Add SystemError::CertStoreDisabled\n  * lib: Convert Sequoia::lookup et al. to use the builder pattern.\n  * lib: Add documentation for cert_list.\n  * lib: Implement Debug for cert_list's output data structures.\n  * lib: Move output-related data structures to the output module.\n  * lib: Add some unit tests for Sequoia::cert_list.\n  * lib: Mark Query and QueryKind as non-exhaustive.\n  * lib: Add some additional constructors for Query.\n  * Split the Query type, and move the sq-specific part back to sq.\n  * lib: Change cert_list to take an interator instead of a Vec.\n  * lib: Change cert_list to always emit the report.\n  * lib: Change list_cert to not error out if nothing matches.\n  * lib: Change list to use its own error type.\n  * lib: Rename list::Builder::execute to list.\n  * lib: Change Sequoia::list to return a builder.\n  * lib: Remove the non-stream variant of cert_list.\n  * lib: Rename Sequoia::list to Sequoia::cert_list.\n  * lib: Re-initialize the WoT data structures when they are out of date.\n  * lib: Return an Arc<WotStore> instead of a &WotStore.\n  * lib: Add Sequoia::shadow_ca_generated_on.\n  * lib: Add utility function to get the generated on host shadow CA.\n  * lib: Add methods to look up shadow CAs.\n  * lib: Return more information from Sequoia::local_trust_root.\n  * lib: Move Sequoia::local_trust_root to its own module.\n  * lib: Move Sequoia::have_secret_key.\n  * lib: Drop Sequoia::lookup_by_userid.  It's unused.\n  * lib: Fix spelling.\n  * lib: Set default revocable value to true.\n  * lib: Improve control char escaping\n  * lib: Change Builder setters to take `self` instead of `&mut self`.\n  * lib: Make SystemError global.\n  * lib: Add examples to the key generate documentation.\n  * lib: Change Sequoia::key_generate to emit structured output.\n  * lib: Use a wrapper type of the return type.\n  * tool: Include comments in sq cert export\n  * tool: canonicalize Ord and PartialOrd impls for Association\n  * tool: silence clippy error for potentially mutable Map key types\n  * tool: avoid allocating a temporary PathBuf just for a comparison\n  * clippy: silence two false positive unnecessary_to_owned warnings\n  * tool: avoid copying Url as String and convert to &str directly\n  * tool: avoid function calls in `Result::expect` arguments\n  * tool/log: allow for more efficient thread-local value initialization\n  * tool: drop to_string() calls for format! args that implement Display\n  * tool: fix formatting to avoid leaking comments into doc strings\n  * clippy: allow two types with interior mutability for BTreeSet keys\n  * lib: avoid allocating a temporary PathBuf just for a comparison\n  * lib: drop to_string() calls for format! args that implement Display\n  * lib: avoid potentially panicking integer cast\n  * lib/log: allow for more efficient thread-local value initialization\n  * clippy: add default lint configuration\n  * meta: enable MSRV-aware dependency resolver by default\n  * Update nettle-sys to fix building with LLVM / clang 22\n  * meta: Make fabio a committer.\n  * Convert key approvals update into builder pattern\n  * Move key-approvals-update to lib\n  * lib: Convert key approvals list into builder pattern\n  * Move key-approvals-list to lib\n  * lib: Change generate to use its own error type.\n  * lib: Return the linted user ID.\n  * CI: use new registry domain name\n  * lib: Change Sequoia::pki_certify to emit structured output.\n  * lib: Change key_generate to return the generated certificate.\n  * lib: Implement Debug for CertificationDiff.\n  * tool: Skip lint summary subsections when category is empty\n  * tool: Fix output file's permissions.\n  * Mark user IDs added by sq key userid add as authenticated\n  * lib: Convert expire to be a method and use the builder pattern.\n  * Move the implementation of sq key expire to the library.\n  * lib: Extend get_subkeys to allow skipping the primary key.\n  * lib: Extract utility function.\n  * lib: Don't export transitional functions.\n  * lib: Convert key::revoke to be a method and use the builder pattern.\n  * tool: Rename function.\n  * Move the implementation of sq key revoke to the library.\n  * lib: Convert userid::revoke to be a method and use the builder pattern.\n  * Move the implementation of sq key userid revoke to the library.\n  * lib: Convert subkey::revoke to be a method and use the builder pattern.\n  * Move the implementation of sq key subkey revoke to the library.\n  * Move revocation support trait and function to the library.\n  * lib: Convert userid::add to be a method and use the builder pattern.\n  * Move the implementation of sq key userid add to the library.\n  * lib: Convert subkey::add to be a method and use the builder pattern.\n  * Move the implementation of sq key subkey add to the library.\n  * lib: Move PasswordPolicy.\n  * lib: Fix documentation.\n  * Move the sq key generate implementation to the library.\n  * lib: Add CheckNewPassword::optional.\n  * tool: Fix typo.\n  * lib: Mark key::import::Builder::import_key as public.\n  * Move the certify_generated function to the library.\n  * Move the user ID linting functionality to the library.\n  * lib: Rework the certification diff functionality.\n  * lib: Add Expiration::from_operation_duration.\n  * lib: Fix comment.\n  * lib: Implement From<usize> for TrustAmount.\n  * lib: Implement PartialEq and Eq for TrustAmount.\n  * lib: Convert certify to be a method and use the builder pattern.\n  * lib: Make some functions const.\n  * lib: Improve error message when unable to verify a message.\n  * tool: Fix spelling.\n  * Gracefully deal with 404 HTTP result codes\n  * Treat certificates passed by fingerprint as authenticated\n  * Ignore revoked user IDs when updating approvals\n  * When displaying a certificate, sort the subkeys.\n  * tool: Don't panic if write fails\n  * Update keccak.\n  * Fix small documentation issues\n  * meta: Add Malte to the list of authors.\n  * tool: Restrict file permissions on sensitive output\n  * Update bytes.\n  * keystore: Upgrade capnp.\n  * Fix small typo\n  * CI: switch docker-image-push job to use dind\n  * Relax dirs dependency.\n  * tool: Avoid unnecessarily validating a certificate.\n  * tool: Don't panic on not existing cert\n  * lib: Correctly handle listing missing certificates.\n  * lib: Display key expiration time of 0 as 'never'\n  * lib: Display signature expiration time of 0 as 'never'\n  * tool: Fix sq verify's documentation.\n  * Improve temporary file handling.\n  * Update reqwest.\n  * Update sequoia-openpgp and sequoia-policy-config.\n  * meta: Update MSRV to 1.85.\n  * meta: Update signing policy.\n  * Move certification-related fucntionality to the library.\n  * lib: Change Sequoia::key_import to emit structured output.\n  * lib: Add functions to best-effort clone errors.\n  * lib: Fix the implementation of AddAssign for ImportStats.\n  * tool: When printing errors, specially handle more errors.\n  * tools: If the key store is not available, return a clap error.\n  * tool: Allow sq packet {armor,dearmor} to emit secret key material.\n  * Move key import to the library.\n  * lib: Don't export the verification helper.\n  * lib: Don't export the decryption helper.\n  * tool: Drop the packet dumper.  Use the version from the library.\n  * lib: Reenable decryption in the packet dumper.\n  * lib: Resynchronize the packet dumper implementations.\n  * tool: Update indicatif from 0.17 to 0.18\n  * lib: Fix sq inspect to escape control characters in user IDs.\n  * lib: Change Sequoia::import to emit structured output.\n  * lib: Emit a message when a message is malformed.\n  * lib: Implement decrypt::Stream for &mut decrypt::Stream.\n  * lib: Improve decrypt's tracing output.\n  * lib: Fix wording.\n  * lib: The decrypt stream doesn't need to impl the verify stream.\n  * Move certificate importing to the library.\n  * Move import statistics to the library.\n  * Move provenance management to the library.\n  * Move `MyAsRef` to the library.\n  * meta: Add Malte as a committer.\n  * lib: Fix comment.\n  * Move signing to the library, change it to emit structured output.\n  * tool: Add FileOrStdout::create_safe_overwrite.\n  * Move the sign Mode type to the library.\n  * Move PartFileWriter to the library.\n  * lib: Change Sequoia::encrypt to emit structured output.\n  * lib: Implement From<&EncryptPurpose> for KeyFlags.\n  * lib: Don't sign with revoked certificates.\n  * lib: Change Sequoia::get_keys et al. to use structured errors.\n  * Move Sq::get_signer, etc. to the library.\n  * Move encryption to the library.\n  * tool: Modify Prompt to count the passwords.\n  * Move the method Sq::have_secret_key to the library.\n  * Move the CompressionMode type to the library.\n  * Move the EncryptPurpose type to the library.\n  * lib: When inspecting a key, indicate if an algorithm is not supported.\n  * lib: When inspect a key, also show the elliptical curve, if any.\n  * tool: When dumping a key, indicate if an algorithm is not supported.\n  * tool: When dumping a key, also show the elliptical curve, if any.\n  * lib: Change Sequoia::decrypt et al. to emit structured output.\n  * lib: Extend the prompting framework to allow checking the response.\n  * lib: Rename imports.\n  * lib: Improve the semantics of designated signers.\n  * lib: Make decrypt and decrypt_unwrap methods on Sequoia.\n  * Move decryption to the library.\n  * lib: Copy emit_cert to the library.\n  * lib: Implement Debug for PreferredUserID.\n  * lib: Change Sequoia::verify to emit structured output.\n  * lib: Improve the semantics of designated signers.\n  * lib: Rename VHelper to VerificationHelper.\n  * lib: Fix and improve some comments.\n  * lib: Export our own Result type.\n  * lib: Use a getter; don't expose the bare field.\n  * lib: Rename sq to sequoia.\n  * Move signature verification to the library.\n  * lib: Implement Prompt for Box<dyn Prompt> and &Prompt.\n  * lib: Silence new rustc warning about implicit lifetimes.\n  * lib: Silence new rustc warning about unnecessary parentheses.\n  * Move Sequoia::decrypt_key to the library.\n  * lib: Add user prompting to the library.\n  * lib: Add helper function, Sequoia::self_userid.\n  * Move the password cache to the library.\n  * Move the TrustThreshold type to the library.\n  * Move the inspect implementation to the library.\n  * lib: Partially copy the packet dumper to the library.\n  * Move the SessionKey type to the library.\n  * Move the best User ID functionality to the library.\n  * Move the certificate look up functionality to the library.\n  * Move the FileOrStdin and FileStdinOrKeyHandle types to the library.\n  * Copy the StdinWarning type to the library.\n  * Move the PreferredUserID type to the library.\n  * lib: Fix spelling.\n  * lib: Rework how Sequoia::list handles output.\n  * lib: Add a builder for calling Sequoia::list.\n  * Move certificate listing and authentication to the library.\n  * Copy some supporting types and functions to the library.\n  * lib: Move the policy into Config.\n  * lib: Reorganize Config and ConfigFile.\n  * lib: Don't implement PartialEq and Eq for Config.\n  * Move Convert to the library.\n  * Move ca_creation_time to the library.\n  * Move Safe to the library.\n  * Move TrustAmount to the library.\n  * Move Query and QueryKind to the library.\n  * Fix spelling.\n  * lib: Improve Config's and ConfigFile's documentation.\n  * lib: Add function to read the default configuration file.\n  * lib: Remove unused function ConfigFile::verify.\n  * lib: Rework ConfigFile.\n  * lib: Fix ConfigFile::default_config.\n  * lib: Don't take ownership when a reference will do.\n  * lib: Move help augmentations to sq.\n  * lib: Track the source of a configuration value.\n  * lib: Add getters for the configuration key and values.\n  * lib: Add getters for the various configuration settings.\n  * lib: Allow setting pki.vouch.certifier-self to the empty string.\n  * tool: Fix the configuration key for key servers in the help text.\n  * tool: Fix the configuration key for the key generation profile.\n  * lib: Check that the default config file is the default config.\n  * lib: Model the verbosity more precisely.\n  * Fix the help text for the --verbose and --quiet flags.\n  * lib: Fix the version reported in the template.\n  * lib: Rename constants to include a default prefix.\n  * lib: Don't hard code the default for network search dane usage.\n  * lib: Don't hard code the default for network search wkd usage.\n  * lib: Don't hard code the default for network search iterations.\n  * Move the configuration management to the library crate.\n  * Move the Expiration type to the library crate.\n  * Move the Profile wrapper type to the library crate.\n  * Move the CipherSuite wrapper type to the library crate.\n  * Move the Time type to the library crate.\n  * Move the SECONDS_IN_DAY and SECONDS_IN_YEAR consts to the library.\n  * lib: Rename Time to Clock to avoid a name collision.\n  * tool: Explicitly goodlist PreferredAEADCiphersuites for keeping.\n  * lib: Move the key store into struct Sequoia.\n  * tool: Use re-exports from the sequoia crate.\n  * lib: Move the cert store into struct Sequoia.\n  * lib: Move time into struct Sequoia.\n  * lib: Move the policy to struct Sequoia.\n  * tool: Move the policy into struct Sq.\n  * tool: Introduce accessor for the current time.\n  * tool: Remove superfluous attributes.\n  * tool: Remove dead code.\n  * tool: Don't needlessly pass around mutable references to Sq.\n  * lib: Turn comments into documentation.\n  * tool: Remove unused code.\n  * tool: Introduce accessor for the policy.\n  * lib: Fix documentation.\n  * Update optimizations for the RustCrypto crates.\n  * sq: Use sequoia to manage the home directory.\n  * lib: Add basic SequoiaBuilder and Sequoia types.\n  * Add a new workspace for the Sequoia library.\n  * Move most everything to a new workspace.\n  * Fix spelling mistakes.\n  * Add sq toc, which recursively lists all commands.\n  * Use the password cache to unlock keys on the softkey backend.\n  * Change try_decrypt to take a reference to the key.\n  * Use the reference time, not now.\n  * Improve tracing output.\n  * Update example\n  * Update tokio to address RUSTSEC-2025-0023.\n  * Update openssl to address RUSTSEC-2025-0022.\n  * Update crossbeam-channel to avoid yanked version.\n  * tests: Fix locating test artifacts at runtime.\n  * tests: Allow for in-vivo testing.\n\n- Update dependencies due to bsc#1282203\n- Add temporary lock for sequoia-wot@0.15.2 until next release due to build issues\n- Add temporary lock for sequoia-cert-store@0.7.4 until next release due to build issues\n- Update dependencies due to bsc#1282203\n\nUpdate to version 1.4.1:\n\n  * implement dumping of pqc artifacts\n  * Use the password cache to unlock keys on the softkey backend.\n  * Change try_decrypt to take a reference to the key.\n  * Use the reference time, not now.\n  * Update h2.\n  * Update sequoia-openpgp.","dates":{"published":"2026-10-19T16:49:48.000Z","modified":"2026-10-20T19:15:03.955Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"sequoia-sq&distro=openSUSE Leap 16.0","name":"sequoia-sq","label":"sequoia-sq&distro=openSUSE Leap 16.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/sequoia-sq&distro=openSUSE Leap 16.0","purlType":"rpm","versions":[{"text":"< 1.5.0-bp160.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-bp160.1.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bugzilla.suse.com/1282203","label":"bugzilla.suse.com/1282203","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93599","label":"www.suse.com/security/cve/CVE-2026-93599","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93600","label":"www.suse.com/security/cve/CVE-2026-93600","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93601","label":"www.suse.com/security/cve/CVE-2026-93601","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93602","label":"www.suse.com/security/cve/CVE-2026-93602","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2026-93599","CVE-2026-93600","CVE-2026-93601","CVE-2026-93602"],"downstream":[],"duplicates":[],"related":["CVE-2026-93599","CVE-2026-93600","CVE-2026-93601","CVE-2026-93602"]},"timeline":[{"kind":"published","date":"2026-10-19T16:49:48.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-20T19:15:03.955Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T17:54:22.320Z","stale":false,"partial":false}}